1252 matches found
ffuf
ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...
CVE-2024-9796
CVE-2024-9796 POC SQLi - CVE-2024-9796 Functional PoC for vulnerability CVE-2024-9796, which affects the WP Advanced Search autocompletion plugin in WordPress, allowing SQL injection through unsanitized GET parameters. 📌 Description This vulnerability allows an attacker to inject arbitrary SQL...
CVE-2025-55885
CVE-2025-55885 Description SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Ligne before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php Attack Vectors SQL injection via unsanitized GET parameter ocid on...
CVE-2025-47423
CVE-2025-47423 – Local File Inclusion in Personal Weather Station Dashboard 12lts Discovered by: Matthew Eagle Status: Public Disclosure Date Reported: 2025-05-05 CVE ID: CVE-2025-47423 🧩 Summary A Local File Inclusion LFI vulnerability in the Personal Weather Station Dashboard version 12lts allo...
semcms
Introduction to Semcms SEMCMS is a foreign trade website content management system CMS that supports multiple languages. root@kitploit: v4.8 Download Link: http://www.sem-cms.com/TradeCmsdown/php/semcmsphp4.8.zip Causes of vulnerabilities: /xcR45qAdmin/SEMCMSMenu.php Line 66 Vulnerability code:...
CVE-2024-29895-CactiRCE-PoC
Cacti RCE - CVE-2024-29895 Usage: python3 cve-2024-29895.py -u https://target.com/ -c id Affecting Cacti versions 1.3.X on DEV builds where cmdrealtime.php is present and POLLERID is enabled. Command Injection is possible via this endpoint, by requesting via GET with payload as HTML Query...
Wordpress-ebook-CVE-2016-10924
Wordpress eBook Download 1.1 plugin has a file disclosure vulnerability by abusing it's get parameter in the filedownload.php file. This script brute forces different processes on the server using this vulnerability. USAGE: python pidbrute.py...
CVE-2025-7606
CVE-2025-7606 code-projects AVL Rooms Project V1.0/city.php SQL injection NAME OF AFFECTED PRODUCTS AVL Rooms Vendor Homepage https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/ submitter dazhi Vulnerable File /city.php VERSIONS V1.0 Software Link...
CVE-2020-27368
CVE-2020-27368 TOTOLINK-A702R-V1.0.0-B20161227.1023 Directory Indexing Vulnerability Description Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /icons/ directories via GET Parameter. Additional Information Remediation disabling...
CVE-2025-66947
CVE-2025-66947 Time Based Blind SQL Injection in krishanmuraiji SMS v1.0 ⏱️ Visual comparison: normal response vs 6s delayed response 🔍 Summary TL;DR: A GET parameter in an admin module allows time-based SQL injection via response delays. A 𝗧𝗶𝗺𝗲 𝗯𝗮𝘀𝗲𝗱 𝗯𝗹𝗶𝗻𝗱 𝗦𝗤𝗟 𝗶𝗻𝗷𝗲𝗰𝘁𝗶𝗼𝗻 𝘃𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 exists in...
HotelDruid-CVE-2021-42948
CVE-2021-42948 HotelDruid 酒店管理软件 v3.0.3 及以下版本被发现通过 GET 参数在多个链接中暴露会话令牌，使攻击者能够获取用户会话 ID。 用于访问应用程序已认证页面的会话令牌是通过 head.php 文件生成的 GET 方法传递的。head.php 文件创建应用程序的菜单栏，用于导航到各种应用程序功能。菜单栏中的每个链接都将会话令牌作为参数 idsessione 的值暴露出来。 会话令牌明文在 GET 请求中被暴露，攻击者可以通过代理、中间人攻击或类似手段拦截这些请求，并利用其劫持应用程序用户会话。 修复措施 供应商已决定不发布补丁来修复此漏洞。 产品...
CVE-2021-3030
Cute Editor for ASP.NET 6.4 (vendor: CuteSoft) is vulnerable to reflected cross-site scripting (CWE-79) caused by improper validation of the Theme GET parameter in colorpicker_more.aspx. The unsanitized value is reflected into an HTML attribute context, allowing a remote, unauthenticated attacker...
CVE-2021-3030
Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpickermore.aspx. A remote, unauthenticated attacker can craft a URL that, once opened by a victim in a browser session authenticated to a site running the...
EUVD-2021-34881
Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpickermore.aspx. A remote, unauthenticated attacker can craft a URL that, once opened by a victim in a browser session authenticated to a site running the...
CVE-2024-52301-Research
CVE-2024-52301-Research A bit of research around CVE-2024-52301. I've seen the vuln and wanted to find out how Laravel is vulnerable. For this, I just diffed the 6.20.44 and 6.20.45 versions, and traced how GET parameters could end up changing the application configuration. I've written about thi...
CVE-2026-58457
CVE-2026-58457 - Unauthenticated OS Command Injection in Shenzhen Aitemi M300 Wi-Fi Repeater !WARNING This code is provided AS IS for educational and research purposes only. Do not use this PoC on production systems, shared environments, or any unauthorized targets. Running or hosting this code m...
CVE-2026-74251
Unauthenticated SQL Injection via Attribute Filter in Phoca Cart Phoca Cart ≤ 6.1.6 — Unauthenticated Attacker Extracts Full Database via Time-Based Blind Injection SUMMARY The a attribute and s specification GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQ...
CVE-2026-52773
YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archived-revision view reflects the time GET parameter into a hidden HTML input in handlers/page/show.php without escaping. Because MySQL coerces malformed DATETIME strings, an attacker can append HTML ...
CVE-2026-84208
AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the User_Location plugin , specifically in the regions.json.php and cities.json.php endpoints. The root cause is that the country and region GET parameters are passed directly into SQL queries without escaping ...